PT-2025-54358 · Sevencs+1 · Sevencs Orca G2+1

Jc0818 · Published 2025-12-31 · Updated 2026-01-05 · CVE-2025-61037

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SevenCs ORCA G2 version 2.0.1.35 (EC2007 Kernel v5.22)

Description A local privilege escalation issue exists due to a Time-of-Check Time-of-Use (TOCTOU) race condition in the license management logic. The regService process, running with SYSTEM privileges, creates a fixed directory and writes files without verifying if the path is an NTFS reparse point. An attacker can replace the target directory with a junction pointing to a user-controlled path, causing the SYSTEM-level process to write binaries to a location controlled by the attacker, enabling arbitrary code execution with SYSTEM privileges. This can be exploited by a standard user with a single User Account Control (UAC) confirmation.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

LPE

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2025-61037

Affected Products

Ec2007 Kernel

Sevencs Orca G2

References · 5

• 🔥 https://gist.github.com/jc0818/233462416579661e4e2795f96457a6bf · Exploit
• https://osv.dev/vulnerability/CVE-2025-61037 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61037 · Security Note
• https://twitter.com/cracbot/status/2008131431260971147 · Twitter Post
• https://twitter.com/CVEnew/status/2006736865668509955 · Twitter Post